Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

pinpoint-audit-override

Estrellas2

Forks0

Actualizado9 de julio de 2026 a las 23:35

Per-PR /audit-override escape hatch for unrelated pnpm audit failures blocking CI Gate. Use when a PR's audit job goes red on a freshly-published advisory unrelated to the PR's own changes, or when explaining/debugging the /audit-override command.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

timothyfroehlich

timothyfroehlich/PinPoint

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Desarrolladores de softwareOcupaciones informáticas y matemáticas·SOC 15-1252

SKILL.md

readonly

name	pinpoint-audit-override
description	Per-PR /audit-override escape hatch for unrelated pnpm audit failures blocking CI Gate. Use when a PR's audit job goes red on a freshly-published advisory unrelated to the PR's own changes, or when explaining/debugging the /audit-override command.

PinPoint Audit-Gate Override

When pnpm audit --audit-level=high goes RED on a freshly-published advisory unrelated to a PR's changes (a transitive dev-dep CVE, or a fix that's major-bump-only), the audit job cascades into CI Gate and blocks the PR. The proper fix is still a dependency-bump PR — but /audit-override is the escape hatch so an unrelated repo-wide advisory doesn't force an admin-merge.

Control surface = PR comments (from authors with write access only):
- /audit-override <reason> — bypass the pnpm audit gate for the PR's current head commit. Records a pinpoint-audit-override commit status + a sticky bot comment (who/when/why) and re-runs the failed CI so the gate re-evaluates immediately.
- /audit-override clear — re-arm the gate.
Commit-bound, not PR-bound: the override is a commit status on the head SHA. Pushing a new commit drops it — the gate re-fires and the override must be re-issued, so a newly-introduced real vulnerability is never silently masked. It only bypasses the audit gate; any other failing check stays red.
Scope: single PR only; never changes repo-wide audit policy or any other PR. No secrets required (default GITHUB_TOKEN).
Implementation: .github/workflows/audit-override.yaml, scripts/workflow/audit-override/*.sh; the consuming check is the Run pnpm audit step in ci.yml (gate.sh check).

Más de este repositorio

mismo repositorio

pinpoint-security

timothyfroehlich/PinPoint

Security patterns, CSP nonces, input validation, auth checks, Supabase SSR patterns. Use when implementing authentication, forms, security features, or when user mentions security/validation/auth.

2026-07-112

pinpoint-superpowers-bridge

timothyfroehlich/PinPoint

Use when running the superpowers plugin lifecycle inside PinPoint — brainstorming, writing-plans, subagent-driven-development, requesting/receiving-code-review, or finishing-a-development-branch — and when a superpowers step wants to merge a branch locally, remove a worktree by hand, run generic npm/pytest tests, dispatch subagents without a scale gate, or write a spec/plan from the read-only root. Also when deciding which bead field a spec, plan, acceptance criterion, or landing note belongs in.

2026-07-102

pinpoint-orchestrator

timothyfroehlich/PinPoint

Orchestrate parallel subagent work in git worktrees — task selection, end-to-end dispatch, monitoring, follow-up, and cleanup.

2026-07-092

pinpoint-pr-workflow

timothyfroehlich/PinPoint

Full PR lifecycle for PinPoint — commit, push, CI monitoring, Copilot + human review handling (via MCP), readiness labeling, gate-enforced merge. Use when committing changes, opening PRs, watching CI, addressing review comments, or merging.

2026-07-092

pinpoint-db-connections

timothyfroehlich/PinPoint

Supabase/Postgres pooler and connection-string reference for PinPoint — Supavisor transaction vs session pooler, IPv4/IPv6, prepared statements, and the resolved PP-d8l8 silent-commit-loss incident. Use when touching src/server/db/**, scripts/migrate-production.ts, scripts/lib/pg-client.mjs, or any DB connection/pooler config.

2026-07-092

pinpoint-migration-conflicts

timothyfroehlich/PinPoint

Protocol for resolving drizzle/meta conflicts on merge — never edit the meta folder by hand, regenerate instead. Use when a merge or rebase produces conflicts under drizzle/meta or drizzle migration .sql/_snapshot.json files.

2026-07-092

name	pinpoint-audit-override
description	Per-PR /audit-override escape hatch for unrelated pnpm audit failures blocking CI Gate. Use when a PR's audit job goes red on a freshly-published advisory unrelated to the PR's own changes, or when explaining/debugging the /audit-override command.

PinPoint Audit-Gate Override

Control surface = PR comments (from authors with write access only):
- /audit-override <reason> — bypass the pnpm audit gate for the PR's current head commit. Records a pinpoint-audit-override commit status + a sticky bot comment (who/when/why) and re-runs the failed CI so the gate re-evaluates immediately.
- /audit-override clear — re-arm the gate.
Commit-bound, not PR-bound: the override is a commit status on the head SHA. Pushing a new commit drops it — the gate re-fires and the override must be re-issued, so a newly-introduced real vulnerability is never silently masked. It only bypasses the audit gate; any other failing check stays red.
Scope: single PR only; never changes repo-wide audit policy or any other PR. No secrets required (default GITHUB_TOKEN).
Implementation: .github/workflows/audit-override.yaml, scripts/workflow/audit-override/*.sh; the consuming check is the Run pnpm audit step in ci.yml (gate.sh check).